This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
File:                     U0Yz8Z9h1lRuur996ft6qYftW_M.cer (raw, json)
Hash identifier:          SceOQlVLlmGhT8YxsRQbRqwXte85Vv8Lm7nfPZZv+M8=
Subject key identifier:   53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B797E91C22BAAEEBD7E5FBF6C711C746B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 12:18:16 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 141.252.0.0/16
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:91:c2:2b:aa:ee:bd:7e:5f:bf:6c:71:1c:74:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 12:18:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:86:77:86:55:39:27:14:1b:1a:24:35:52:
                    e0:7c:6f:8d:52:0f:c8:91:53:5b:13:be:4b:d7:53:
                    e2:ef:e2:c0:81:e2:57:e6:41:04:c2:fb:82:aa:50:
                    3e:3a:28:74:00:5d:6a:e9:bc:e6:e1:4e:87:17:69:
                    0d:0c:c3:5e:ff:c6:b1:3e:86:e6:ef:3a:06:29:39:
                    5a:14:8a:73:1f:0b:9d:73:7a:bc:55:72:a6:94:4c:
                    2d:9b:a3:ff:aa:04:ac:13:98:14:10:73:a9:b6:62:
                    fe:98:67:c7:62:61:79:2f:a9:76:8f:50:82:45:bd:
                    9b:3d:3c:37:f2:6c:de:7f:ba:a0:ef:2e:04:b3:e0:
                    08:e1:ad:31:11:eb:76:72:33:a4:76:0b:c6:bf:91:
                    ea:33:db:f7:1d:70:7d:ba:0a:23:c5:b0:7b:5a:b8:
                    81:95:e5:71:a0:8f:8d:0a:60:12:9a:d8:ff:23:e3:
                    2f:1e:25:6d:f5:0d:0e:1d:67:97:a7:49:bd:80:03:
                    33:fa:f8:fe:62:c9:22:84:7e:93:5d:f2:2f:6f:65:
                    2d:f4:7d:3d:df:74:46:e5:80:66:12:3c:0d:f3:ca:
                    83:67:e7:bd:41:27:57:a1:7b:26:25:b5:87:d5:42:
                    9d:b3:6f:10:50:1c:94:58:af:a0:bd:e0:78:f4:41:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:d2:69:eb:5c:df:f5:81:ca:2b:af:8d:ca:00:f6:d6:a8:2d:
         cd:f4:ff:30:7b:31:c5:b7:c8:ab:3e:56:c5:3d:ee:1f:b9:77:
         e0:48:b3:51:62:21:e9:ac:ee:7a:82:88:3b:03:19:94:7d:b4:
         81:b1:44:30:50:ec:15:18:93:cc:28:16:f0:bd:83:47:c2:66:
         78:07:38:1c:aa:f2:71:2e:a9:67:ca:db:78:c8:d7:c1:e5:97:
         af:5b:4b:b0:78:b8:84:11:23:1d:4f:30:80:9c:79:d7:ae:83:
         6b:2d:4e:ed:8b:2c:e7:98:09:88:34:51:f2:5e:4e:54:55:64:
         27:2a:d2:0b:72:da:de:0b:1c:ac:d9:ff:14:3c:b7:ae:9f:4c:
         54:ba:34:85:d5:6f:eb:32:ea:88:a2:d1:c2:38:01:2d:00:33:
         94:10:40:46:c3:05:55:57:88:d3:b3:3b:22:5a:86:4f:9c:a1:
         a4:e6:9d:19:9e:56:57:3e:7d:39:72:fa:0f:49:e2:b4:d0:59:
         1e:79:99:f6:d7:54:0d:8b:40:ad:b9:ae:dd:12:50:b8:2b:5e:
         74:99:7d:14:38:39:68:8e:c0:4a:60:fd:d5:cc:ff:2c:ef:f9:
         8c:97:89:2d:e2:c3:ea:6a:6b:45:21:54:f4:e6:75:15:33:0d:
         2d:26:1a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----